Service worker

A worker registered against a scope that intercepts network requests for pages under it, enabling offline support, custom caching and push. It has no DOM access, runs on its own lifecycle, and keeps controlling pages until every tab is closed — which is why a bad one is genuinely hard to remove from the field. Shipping one means owning an update strategy before the first release, not after.